Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9a7a3552-9402-36f9-b84a-357ff9c6bd77.roa
File:                     9a7a3552-9402-36f9-b84a-357ff9c6bd77.roa (raw, json)
Hash identifier:          iFAu73IeHIV3XQtTRjs6k7EqlVRqtKnunv+lgptdIYY=
Subject key identifier:   F6:45:7C:16:39:8D:7A:5F:92:54:24:3A:59:BE:62:D1:25:7D:C8:BE
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847FAE4C13BD6B92A466CB2BD80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9a7a3552-9402-36f9-b84a-357ff9c6bd77.roa
Signing time:             Sun 24 Nov 2024 00:12:57 +0000
ROA not before:           Sun 24 Nov 2024 00:12:57 +0000
ROA not after:            Sat 22 Feb 2025 00:12:57 +0000
asID:                     21859
IP address blocks:        199.182.168.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 22 Jan 2025 17:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fa:e4:c1:3b:d6:b9:2a:46:6c:b2:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 24 00:12:57 2024 GMT
            Not After : Feb 22 00:12:57 2025 GMT
        Subject: CN=bc8ea2f6-74cb-4978-b60b-970eddc93df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f8:b5:0d:11:65:09:6a:f6:a2:81:c7:5d:86:
                    8d:bb:c0:98:a7:f0:5a:30:17:ef:8b:b7:e2:7c:b4:
                    29:ca:39:a8:d6:8d:08:be:a2:8d:cc:56:c3:6a:6c:
                    8a:87:23:ee:8a:1b:a3:df:54:b9:d6:e4:59:b6:91:
                    a2:ee:24:c0:85:af:d7:58:c2:b9:66:b4:ca:01:dd:
                    2a:f3:61:24:6e:ed:16:01:f0:31:57:66:66:36:0a:
                    db:5b:2c:03:b9:c0:00:a4:42:bf:2a:cc:d3:e3:34:
                    99:9b:6e:f4:82:85:82:74:94:aa:51:36:e3:9c:71:
                    24:ad:f9:5b:2e:c1:3e:b6:b5:6e:b6:29:7e:d1:b0:
                    41:a7:cf:0a:a9:d6:0c:4d:3f:62:f3:c4:c1:95:2b:
                    db:ae:10:96:33:dd:89:19:35:72:5d:8d:36:f5:5c:
                    dd:84:12:46:16:25:3c:17:67:4c:cf:9c:a3:6d:f9:
                    58:8d:c7:51:ce:e4:c8:5b:72:3e:a3:32:14:d9:01:
                    92:b2:f7:35:f7:21:28:21:48:ff:19:5f:14:e7:c1:
                    d1:e3:0f:ae:b2:6e:d9:8c:29:cd:0b:3d:41:ba:9e:
                    cf:72:e2:e7:1e:dc:6c:cf:1a:a2:7f:f8:6b:f4:5e:
                    e1:08:26:d3:79:04:8a:3a:89:4e:ee:a1:75:8a:87:
                    31:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:45:7C:16:39:8D:7A:5F:92:54:24:3A:59:BE:62:D1:25:7D:C8:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9a7a3552-9402-36f9-b84a-357ff9c6bd77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:13:92:09:a5:d1:59:78:c3:6d:e3:53:32:63:38:7f:7e:2d:
         d6:57:f0:64:6f:7f:45:fd:a9:b1:07:4b:88:2a:b3:67:ba:15:
         de:68:0e:71:24:7d:4d:01:fd:26:ca:dc:30:0c:9a:36:9f:5b:
         d6:ed:cd:d5:af:64:8b:d3:cc:86:e9:4f:8b:6e:60:ac:37:27:
         a2:08:46:73:a0:5f:d6:52:dc:59:4c:3c:5b:0f:59:bd:1e:61:
         19:ff:3b:ef:61:4f:2c:02:15:f8:2f:07:ba:7a:08:e0:95:60:
         9a:97:04:64:d0:fb:30:ba:55:b7:35:96:21:a6:79:6a:10:63:
         b0:bb:57:41:ce:70:9c:b4:ae:f2:fe:07:0a:58:d4:cf:be:46:
         de:eb:0c:2c:f9:1d:d3:7e:46:2e:1b:5c:1b:f0:96:e3:55:00:
         52:1b:7e:2d:55:6a:4a:0d:26:f0:ca:ff:77:0a:88:d0:3c:5e:
         2e:8c:19:ac:e5:4e:a7:30:29:67:75:df:00:26:1e:46:b8:d9:
         e4:b5:fa:e0:d3:6e:d7:78:de:78:ae:fe:cb:a5:06:db:47:cf:
         ca:a7:68:23:45:52:84:c9:28:e4:ad:38:63:28:f2:73:19:e9:
         9e:a0:ba:f2:ef:0c:0a:b8:72:a6:c8:a6:b2:1e:11:1f:dc:15:
         9f:85:0b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 19:44:36 2025 by rpki-client